In Depth
Dual Threats: How to Build Expertise, Certifications in Multiple Subjects
Four professionals discuss the value of MBAs, CFAs and other certifications and degrees from beyond the security field. Should you become a 'dual threat'?
By Lauren Gibbons Paul
"It was tough. But I got really interested in all aspects of security. I transformed myself," says McDonald. He then knocked off the CISA and the PMP in another few months.
The certifications are more than so many pieces of paper to McDonald. For one thing, They made him a much more attractive candidate when he was interviewing for a position as CISO for Georgia College.
"They were looking for someone who had not only experience but credentials behind their name. [The certifications] show that I do have the knowledge. They were a door opener," he says. Even better, he will receive an annual bonus for each certification, which has, no doubt, sweetened the memory of those long hours studying.
The Long View
ALL OF the security professionals interviewed here strongly endorse the idea of obtaining multidisciplinary expertise as a way to further one's career. Kent of Genzyme encourages executives working in security—including those on his own staff—to fill the gaps in their knowledge by obtaining education in complementary areas.
"We try to have all the members of our team take a multidisciplinary view of security. The woman who runs our product security just got her master's in information security. That wouldn't seem to be tied to her role in global product security, but it gives her great overlap of knowledge." ##
Other stories by Lauren Gibbons Paul
security certifications
Security Directions: A Virtual Conference
Available On Demand Sept. 30 - Dec. 30
Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.
Protecting PII: How to Work with IT to Manage Risk
Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.



